News for hackers. Stuff that matters.

A comment on Reading privileged memory with a side-channel. Parent comment

Re:Reading privileged memory with a side-channel by quotemstr on Wednesday January 03, 2018 @08:33PM (#16067238)
clflush only makes the attack easier. There are other ways to flush the cache. Besides: code is mutable. You can just make a clflush instruction out of thin air without the loader's involvement.
[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by j_coder on Wednesday January 03, 2018 @09:20PM (#16067463)
For software that requires self-modifying code to run the existing Linux kernel patch would apply (performance penalty). If there is other ways to flush the cache it is necessary to evict the entire software memory on the interrupt.
[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by j_coder on Wednesday January 03, 2018 @09:23PM (#16067473)
So in all cases just evict the entire process memory from the cache when the interrupt is raised when reading from a protected memory. The performance penalty would apply only to misbehaved code.
[ Parent | on HN ]